Merge branch 'main' into ci/slow-runner-timeouts

On a busy CI machine (several fork jobs under gVisor at once) a web
offline launch took over 90 s and the icon review server took over ~2 s
to answer. Launches now get 240 s and one retry; the review server gets
up to 60 s to start.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/tools/test_icon_export.py

@@ -84,7 +84,9 @@ class IconExportTest(unittest.TestCase):
                                     stdout=subprocess.DEVNULL, stderr=subprocess.PIPE)
             try:
                 url = 'http://127.0.0.1:%d' % port
-                for attempt in range(100):
+                # Up to a minute: CI machines can be busy enough that the server starts slowly.
+                deadline = time.monotonic() + 60
+                while time.monotonic() < deadline:
                     try:
                         with urllib.request.urlopen(url + '/api/review', timeout=1) as response:
                             base = json.load(response)

xtask/src/web_offline_test.rs

@@ -61,8 +61,10 @@ use crate::web_offline;
 const PREFIX: &str = "/solidcraft/app/";
 /// Another copy of the app on the same origin.
 const ELSEWHERE: &str = "/solidcraft/elsewhere/";
-/// How long one launch may take (a real build compiles ~30 MB of wasm).
-const LAUNCH_TIMEOUT: Duration = Duration::from_secs(90);
+/// How long one launch may take (a real build compiles ~30 MB of wasm). Generous: the CI
+/// runners that take fork pull requests run several jobs per machine under gVisor, where one
+/// launch has taken over 90 s.
+const LAUNCH_TIMEOUT: Duration = Duration::from_secs(240);
 /// sw.js's NAVIGATE_TIMEOUT_MS, less a margin: a hung network is waited for at least this long.
 const SLOW_NETWORK_WAIT: Duration = Duration::from_secs(3);
 /// How long a file takes in Mode::SlowFiles.
@@ -193,15 +195,24 @@ pub fn run(root: &Path, site: Option<&str>, required: bool) -> Result<(), String
         let n = count.get() + 1;
         count.set(n);
         let t = Instant::now();
-        let r = cdp.call("Page.navigate", json!({ "url": format!("http://127.0.0.1:{}{at}?launch={n}", server.port) }))?;
-        if let Some(e) = r["errorText"].as_str().filter(|e| !e.is_empty()) {
-            return Err(format!("launch {n} (build {build}): the page didn't load: {e}"));
-        }
         let search = format!("?launch={n}");
-        wait_for(cdp, &state_js, &format!("launch {n} starts build {build}"), |s| {
-            s["search"] == search.as_str() && s["ready"] == "complete" && s["build"] == build && s["started"] == true
-        })?;
-        Ok(t.elapsed())
+        let what = format!("launch {n} starts build {build}");
+        // One retry: on a heavily loaded machine a launch can stall past the timeout. Loading the
+        // same page again must still start the same build.
+        for attempt in 1..=2 {
+            let r = cdp.call("Page.navigate", json!({ "url": format!("http://127.0.0.1:{}{at}?launch={n}", server.port) }))?;
+            if let Some(e) = r["errorText"].as_str().filter(|e| !e.is_empty()) {
+                return Err(format!("launch {n} (build {build}): the page didn't load: {e}"));
+            }
+            match wait_for(cdp, &state_js, &what, |s| {
+                s["search"] == search.as_str() && s["ready"] == "complete" && s["build"] == build && s["started"] == true
+            }) {
+                Ok(()) => return Ok(t.elapsed()),
+                Err(e) if attempt == 1 => println!("retry {e}"),
+                Err(e) => return Err(e),
+            }
+        }
+        unreachable!()
     };
     let launch = |cdp: &mut Cdp, build: &str| launch_at(cdp, PREFIX, build);
     // The page is controlled by the worker, which keeps exactly this build's files (and the mark